Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6.7.2.1 are susceptible to an open redirection vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to redirect the target user to a malicious web site.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/102455 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1040138 | Third Party Advisory VDB Entry |
https://www.symantec.com/security-center/network-protection-security-advisories/SA155 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2017-05-11 14:30
Updated : 2024-02-28 15:44
NVD link : CVE-2016-9099
Mitre link : CVE-2016-9099
CVE.ORG link : CVE-2016-9099
JSON object : View
Products Affected
broadcom
- advanced_secure_gateway
- symantec_proxysg
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')